Privacy Policy

baMAP is a global interactive directory of certified Behaviour Analysts. We operate at bamap.io and are committed to protecting the privacy of everyone who uses our platform — whether you're browsing, listing yourself, or submitting events.

If you have questions about this policy, please contact us at support@bamap.io.

Information you provide directly:

• Name and professional credentials (e.g. BCBA)
• Public contact email address
• Private login email address (used only for authentication — never displayed)
• City and country
• Professional bio (up to 300 characters, optional)
• Profile photo (optional)
• Specialisation areas
• Certification numbers (for verification only — never displayed publicly)

Information collected automatically:

• Basic usage data such as pages visited and features used
• Browser type and device type
• IP address (used for security and analytics, not stored permanently)

Information from third parties: Some profiles on baMAP were seeded from public certification registries (e.g. BACB). If your profile was seeded, it contains only publicly available information and you can claim and edit it at any time.

We use the information we collect to:

• Display your public profile in the baMAP directory
• Authenticate you securely via magic link (no password required)
• Process and review profile edits you submit
• Send transactional emails (e.g. magic login links, edit confirmations)
• Verify your certification credentials when claiming a seeded profile
• Display your submitted events in The Hub
• Improve the platform and fix technical issues

We keep a clear separation between your public profile and your private login credentials.

Profile edits you submit are stored privately in a pending state and reviewed by our team before being published. Pending edits and profile photos are not visible to other users until approved.

Your data is stored securely using Supabase, a PostgreSQL-based cloud database provider. Supabase applies row-level security (RLS) policies, meaning only authorised parties can access your private data.

Profile photos and event images are stored in Supabase Storage. All storage buckets are configured with appropriate access controls.

We take reasonable technical measures to protect your information, including encrypted connections (HTTPS), access controls, and authentication safeguards. While we take data security seriously and work hard to protect your information, we recommend treating your login email with the same care you would any professional account.

We do not sell your private personal information. Profile information that you choose to make public on baMAP (such as your name, credentials, city, and contact email) is, by its nature, publicly accessible to anyone who visits the directory. We share data only with the following service providers who help us operate baMAP:

• Supabase — database, authentication, and file storage
• Netlify — website hosting and deployment
• Resend / Zoho Mail — transactional email delivery

These providers access only the data necessary to perform their services and are bound by their own privacy and security obligations.

We may also disclose your information if required by law, or to protect the rights and safety of baMAP, its users, or the public.

You have the following rights regarding your personal information:

• Access: Request a copy of the data we hold about you
• Correction: Update or correct your profile information at any time by logging in and submitting an edit
• Deletion: Request that your profile be removed from baMAP
• Portability: Request your data in a portable format
• Objection: Object to how we use your data in certain circumstances

To exercise any of these rights, contact us at support@bamap.io. We will respond within a reasonable timeframe.

baMAP uses minimal cookies. We use session storage to maintain your login state and to process authentication flows. We do not use third-party advertising cookies or tracking pixels.

We may use basic analytics (such as page view counts) to understand how the platform is used. This data is aggregated and does not identify individual users.

baMAP is a professional directory intended for certified Behaviour Analysts and adults in the field. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted information to baMAP, please contact us and we will remove it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are significant, we will make reasonable efforts to notify registered users.

Continued use of baMAP after changes are posted constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to us:

• Email: support@bamap.io
• Website: bamap.io